First published: Wed Apr 21 1999(Updated: )
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
NetBSD NetBSD | =1.3 | |
NetBSD NetBSD | =1.3.1 | |
NetBSD NetBSD | =1.3.3 | |
NetBSD NetBSD | =1.3.2 | |
=1.3 | ||
=1.3.1 | ||
=1.3.2 | ||
=1.3.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0466 is considered a high-severity vulnerability due to its ability to allow local users to access arbitrary files.
To fix CVE-1999-0466, upgrade to a version of NetBSD that is later than 1.3.3, where this vulnerability is addressed.
CVE-1999-0466 affects NetBSD versions 1.3, 1.3.1, 1.3.2, and 1.3.3.
CVE-1999-0466 can be exploited by local users who have access to the affected systems.
CVE-1999-0466 is a local file access vulnerability that allows unauthorized access to files through the /dev/wabi device.